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Listing of the Claims 

1 . (previously presented) A method for generating identification data, comprising the 
steps of: 

providing an ATM PESf related to a first transaction type that is an ATM transaction; 

and generating a non-ATM electronic commerce PIN on a central computer by 
performing a cryptographic operation on said ATM PIN, said non-ATM electronic commerce 
PIN to be entered by a user in a second transaction type that is a non-ATM financial transaction; 

and transmitting said non-ATM electronic commerce PIN to said user. 

2. (previously presented) A method according to claim 1, wherein the step of performing 
a cryptographic operation comprises: 

providing a conversion key; and 

using the conversion key to perform said cryptographic operation upon the ATM PIN. 

3. (original) A method according to claim 2, wherein the step of providing a conversion 
key comprises: 

providing conversion key derivation data; 
providing a conversion key derivation key; and 

performing a cryptographic operation upon the conversion key derivation data and the 
conversion key derivation key. 

4. (original) A method according to claim 3, wherein the step of performing a 
cryptographic operation upon the conversion key derivation data and the conversion key 
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derivation key comprises using the conversion key derivation key to perform at least one 
cryptographic operation upon the conversion key derivation data. 

5. (original) A method according to claim 4, wherein the conversion key derivation data 
includes an identification number that is associated with multiple accounts, and wherein at least 
one cryptographic operation using a secret key is performed to cryptographically process said 
conversion key derivation data to produce the conversion key. 

6. (previously presented) A method according to claim 1, wherein the step of performing 
a cryptographic operation comprises: 

providing cryptographically-computed data; and 

performing an operation upon the ATM PIN and the cryptographically-computed data. 

7. (original) A method according to claim 6, wherein the step of providing 
cryptographically- computed data comprises: 

providing initial data; and 

performing at least one cryptographic operation using a secret key upon the initial data, 
thereby producing the cryptographically-computed data. 

8. (original) A method according to claim 7, wherein said at least one cryptographic 
operation using a secret key comprises at least one of a DES-encryption and a DES-decryption. 
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9. (original) A method according to claim 8, wherein at least a portion of the initial data 
is obtained from at least a portion of an account number. 

10. (previously presented) A method according to claim 9, wherein the operation upon 
the ATM PIN and the cryptographically-computed data comprises either a subtraction operation 
or an addition operation. 

11. (previously presented) A method according to claim 10, wherein the step of providing 
cryptographically-computed data further comprises generating a cryptographically-computed 
nvimber having a base corresponding to a base of a number representing the ATM PIN, wherein 
said cryptographically-computed number has a number of digits corresponding to a number of 
digits of said mraiber representing the ATM PIN. 

12. (previously presented) A method according to claim 6, wherein the step of providing 
cryptographically-computed data comprises generating a cryptographically-computed number 
having a base corresponding to a base of a number representing the ATM PIN, wherein said 
cryptographically-computed number has a number of digits corresponding to a number of digits 
of said number representing the ATM PIN. 

13. (previously presented) A method according to claim 6, wherein the operation upon 
the ATM PIN and the cryptographically-computed data comprises either a subtraction operation 
or an addition operation. 

14-16. (previously withdrawn) 
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17. (previously presented) A system for generating identification data, comprising: 
a memory for storing an ATM PIN; 

a processor on a central computer for performing a cryptographic operation upon the 
ATM PIN, such that said processor generates a second non-ATM PIN related to a non-ATM 
electronic transaction during which transaction a user enters said second non-ATM PIN; and 

a transmission means for transmitting said non-ATM PIN to said user. 

18. (previously presented) The system of claim 17, wherein the memory includes means 
for storing a conversion key, and wherein the processor comprises means for using the 
conversion key to perform a cryptographic operation upon the ATM PIN. 

19. (original) The system of claim 18, wherein the memory further includes: 
means for storing conversion key derivation data; and 

means for storing a conversion key derivation key; and 

wherein the processor comprises means to perform a cryptographic operation upon the 
conversion key derivation data and the conversion key derivation key, thereby generating the 
conversion key. 

20. (original) The system of claim 19, wherein the cryptographic operation upon the 
conversion key derivation data and the conversion key derivation key comprises at least one DES 
operation. 
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21. (original) The system of claim 20, wherein the conversion key derivation data is 
derived from an identification number, and wherein said at least one DES operation comprises: 

using a portion of the conversion key derivation key to DES-encrypt the conversion key 
derivation data, thereby producing a first conversion key generation result; 

using a portion of the conversion key derivation key to DES-decrypt the first conversion 
key generation result, thereby producing a second conversion key generation result; 

using a portion of the conversion key derivation key to DES-encrypt the second 
conversion key generation result, thereby producing a third conversion key generation result; 

using the third conversion key generation result as a first portion of the conversion key; 

using a portion of the conversion key derivation key to DES-encrypt the third conversion 
key generation result, thereby producing a fourth conversion key generation result; 

using a portion of the conversion key derivation key to DES-decrypt the fourth 
conversion key generation result, thereby producing a fifth conversion key generation resuh; 

using a portion of the conversion key derivation key to DES-encrypt the fifth conversion 
key generation result, thereby producing a sixth conversion key generation resuh; and 

using the sixth conversion key generation result as a second portion of the conversion 

key. 

22. (previously presented) The system of claim 17, wherein the memory includes means 
for storing cryptographically-computed data, and wherein the processor comprises: 

means for generating the cryptographically-computed data; and 
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means for performing an operation upon the ATM PEN and the 
cryptographically-computed data. 

23. (original) The system of claim 22, wherein the memory further includes means for 
storing initial data, and wherein the means for generating the cryptographically-computed data 
comprises means for performing at least one cryptographic operation upon the initial data, 
thereby producing the cryptographically-computed data. 

24. (original) The system of claim 23, wherein said at least one cryptographic operation 
comprises at least one of a DES-encryption and a DES-decryption. 

25. (original) The system of claim 24, wherein the initial data is obtained from an account 
number, wherein the memory further includes means for storing a conversion key, and wherein 
the cryptographic operation uses the initial data and the conversion key to produce the 
cryptographically-computed data. 

26. (previously presented) The system of claim 25, wherein the means for performing an 
operation upon the ATM PIN and the cryptographically-computed data comprises either a 
subtraction means or an addition means. 

27. (previously presented) The system of claim 25, wherein the means for performing an 
operation further comprises means for generating a cryptographically-computed number having a 
base corresponding to a base of a number representing the ATM PIN, wherein said 
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cryptographically-computed number has a number of digits corresponding to a number of digits 
of said number representing the ATM PIN. 

28. (previously presented) The system of claim 22, wherein the means for performing an 
operation comprises means for generating a cryptographically-computed number having a base 
corresponding to a base of a number representing ATM PIN, wherein said 
cryptographically-computed number has a number of digits corresponding to a number of digits 
of said number representing the ATM PIN. 

29. (original) The system of claim 22, wherein the means for performing an operation 
comprises either a subtraction means or an addition means. 

30-32. (previously withdrawn) 

33. (currently amended) A system for generating identification data, comprising: 
a memory on a central computer; 

a processor on said central computer in communication with the memory; 

a computer-readable medium on said central computer in conmiunication with the 
processor and storing instructions which, when executed, cause the processor to perform the 
steps of: 

storing an ATM PIN in the memory, said first se^ PIN being related to a first transaction 

type; 

performing a cryptographic operation upon the ATM PIN, thereby generating a second 
PIN to be entered by a user during a non-ATM electronic transaction; and 
means for transmitting said non-ATM PIN to said user. 
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34. (previously presented) The system of claim 33, wherein the step of performing a 
cryptographic operation comprises: 

providing a conversion key; 

storing the conversion key in the memory; and 

using the conversion key to perform said cryptographic operation upon the ATM PIN. 

35. (original) The system of claim 34, wherein the step-ej ^means for providing a 
conversion key comprises: 

storing conversion key derivation data in the memory; 
storing a conversion key derivation key in the memory; and 

performing a cryptographic operation upon the conversion key derivation data and the 
conversion key derivation key. 

36. (original) The system of claim 35, wherein the step of performing a cryptographic 
operation upon the conversion key derivation data and the conversion key derivation key 
comprises using the conversion key derivation key to perform at least one DES operation upon 
the conversion key derivation data. 

37. (original) The system of claim 36, wherein the conversion key derivation data is 
derived from an identification number, and wherein said at least one DES operation comprises: 

using a portion of the conversion key derivation key to DES-encrypt the conversion key 
derivation data, thereby producing a first conversion key generation result; 
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using a portion of the conversion key derivation key to DES-decrypt the first conversion 
key generation result, thereby producing a second conversion key generation result; 

using a portion of the conversion key derivation key to DES-encrypt the second 
conversion key generation result, thereby producing a third conversion key generation result; 

using the third conversion key generation result as a first portion of the conversion key; 

using a portion of the conversion key derivation key to DES-encrypt the third conversion 
key generation result, thereby producing a fourth conversion key generation resuh; 

using a portion of the conversion key derivation key to DES-decrypt the fourth 
conversion key generation result, thereby producing a fifth conversion key generation result; 

using a portion of the conversion key derivation key to DES-encrypt the fifth conversion 
key generation resuh, thereby producing a sixth conversion key generation result; and 

using the sixth conversion key generation result as a second portion of the conversion 

key. 

38. (previously presented) The system of claim 33, wherein the step of performing a 
cryptographic operation comprises: 

providing cryptographically-computed data; 

storing the cryptographically-computed data in the memory; and 

performing an operation upon the ATM PIN and the cryptographically-computed data. 

39. (original) The system of claim 38, wherein the step of-providing 
cryptographically-computed data comprises: 

storing initial data in the memory; and 
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performing at least one cryptographic operation using a secret key upon the initial data, 
thereby producing the cryptographically-computed data. 

40. (original) The system of claim 39, wherein said at least one cryptographic operation 
using a secret key comprises at least one of a DES-encryption and a DES-decryption. 

41 . (previously presented) The system of claim 40, wherein at least a portion of the initial 
data is obtained from at least a portion of an account number. 

42. (previously presented) The system of claim 41, wherein the operation upon the ATM 
PIN and the cryptographically-computed data comprises either a subtraction operation or an 
addition operation. 

43. (previously presented) The system of claim 42, wherein the step of providing 
cryptographically-computed data further comprises generating a cryptographically-computed 
number having a base corresponding to a base of a number representing the ATM PIN, wherein 
said cryptographically-computed number has a number of digits corresponding to a number of 
digits of said number representing the ATM PIN. 

44. (previously presented) The system of claim 38, wherein the step of providing 
cryptographically-computed data comprises generating a cryptographically-computed number 
having a base corresponding to a base of a number representing the ATM PIN, wherein said 



NY02:618107 



11 



AP31994 (070457.0747) 
PATENT 

cryptographically-computed niimber has a number of digits corresponding to a number of digits 
of said number representing ATM PIN. 

45. (previously presented) The system of claim 38, wherein the operation upon the ATM 
PIN and the cryptographically-computed data comprises either a subtraction operation or an 
addition operation. 

46-48. (previously withdrawn) 

49. (previously presented) A method for generating identification data for a non-ATM 
electronic financial transaction over a communications network, comprising the steps of: 

providing a first set of identification data related to a first transaction type; 

generating a second set of identification data on a central computer by performing a 
cryptographic operation on said first set of identification data, wherein said first set of 
identification data is an ATM PIN, said first transaction type is an ATM-transaction, said second 
set of identification data is a non-ATM electronic commerce PIN to be entered by a user in a 
non-ATM electronic financial transaction; and 

transmitting said non-ATM electronic commerce PESf to said user. 

50. (previously presented) The method of claim 49, further comprising the step of: 
performing a second cryptographic operation upon said electronic commerce PIN to generate 
said ATM-PIN. 
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